Description
rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc() that allows nearby attackers to write past a 7-byte stack buffer by sending more than seven valid Manchester-coded words. Attackers can transmit a crafted OOK radio signal or supply a crafted signal file to crash rtl_433 and corrupt stack memory, enabling control-flow hijacking on builds without stack canaries.
Related CPE's
Could not find any relations
References
CVSS impact metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
7.1 · High
Information
Source identifier
Vulnerability status
Deferred
Published
2026-10-28T03:17:12.607Z
13 hours agoLast modified
2026-10-28T15:24:56.033Z
53 minutes ago